> On 6 Jun 2017, at 12:51, Jonathan Gray <j...@jsg.id.au> wrote: > While chromium, firefox, lua(sec), java, go, ftp(1), curl, wget, > and others when acting as TLS clients all manage to get it right. > > Both apache 2.4.25 and nginx 1.10.2p from ports do not strictly > enforce this on the server side but httpd(8) does as libtls does.
This fixes TLS in httpd(8) on Safari for me.